Your memories belong to you. Narratrace is designed to keep them private by default, place sharing under your control, and give you understandable choices about AI, export, and account closure.
You retain ownership of the memories, recordings, photographs, interviews, and letters you add to Narratrace. We use that content only to provide features you request and do not sell private family content.
New memories are private unless you take an explicit sharing action. Family access, named audiences, and public links are separate choices, and granted access can be removed.
Narratrace uses encrypted connections for the public service. Stored information is protected using the encryption controls provided by the services that hold it. We review these statements as the product and its providers change.
AI is used for product features you choose, such as guiding an interview, transcribing a recording, or helping organise a memory. Private family content is not used by Narratrace for cross-user learning, advertising, or training Narratrace models.
We work toward sending only the content needed for the requested task and reviewing the terms that govern any service used to process it.
You can export supported archive content from your account. The current export includes interview transcripts and narratives, letters, and uploaded photographs with supported captions. Some media and service metadata may not yet be included.
Closing an account starts a 30-day grace period during which it can be reopened. After that period, ordinary access and sharing are revoked and direct account identifiers are replaced before memories enter restricted archival retention.
Restricted archival retention is not deletion or anonymisation. Retention periods, legal deletion rights, and exceptions depend on applicable policy and jurisdiction. We are still formalising a complete retention schedule and will not describe retained memories as deleted.
Accessibility and secure-by-default behaviour are release requirements. We design for keyboard access, visible focus, readable contrast, reduced motion, mobile use, and clear consent at sensitive actions, and continue to address gaps as they are found.
Narratrace does not currently claim ISO 27001, SOC 2, GDPR or DPDP compliance, a penetration-testing badge, an uptime guarantee, or another independent certification unless a current verification is published here.
Depending on applicable law, you may have rights to access, correct, export, close, or request deletion of personal information. Our Privacy Policy explains the current process and important limits.
Payments are handled by a separate payment service. Narratrace does not directly collect or store full payment-card numbers.
If you believe you have found a security issue, use our contact form and select “Security report.” Please avoid including private family content or attempting to access another person's information. We appreciate coordinated reporting and will review submissions through our supported process.